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Description 

[0001] This invention relates to a computer system 
using a checkpoint method, and in particular, concerns 
a disk control system that enables high-speed disk ac- 
cess to avoid processing delay associated with the 
checkpoint method. 

RELATED BACKGROUND ART 

[0002] A computer system using the checkpoint meth- 
od postpones write operation to a disk device until the 
next checkpoint is acquired. Otherwise, if the next time 
the computer system restarts from the last checkpoint 
because of a fault, the disk. device would not be able to 
be restored to the state of the time of the last checkpoint. 
This causes a considerable performance degradation. 

TECHNICAL PROBLEM AND THE SOLUTION 

[0003] The purpose of this invention is to provide a 
recoverable disk device without the processing delay 
associated with the checkpoint method. 
[0004] Another purpose of this invention is to acceler- 
ate a disk write operation by using a nonvolatile memory. 
[0005] In accordance with the present invention, the 
foregoing objects, among others, are achieved by pro- 
viding a computer system executing a checkpoint oper- 
ation, the system restarting from the last checkpoint sta- 
tus if a fault occurred, the system characterized in that 
said disk device is for reading and storing data, said op- 
erating system is for issuing a write or a read request to 
the disk device and in that the system further includes 
a nonvolatile memory, write request storage means for 
storing write data and an associated write request in the 
nonvolatile memory, and disk write means for storing the 
write data stored in the nonvolatile memory by the write 
request storage means into the disk device, the disk 
write means further including means for storing write da- 
ta according to the write request generated before the 
last checkpoint from the nonvolatile memory to the disk 
device. 

[0006] There has also been provided, in accordance 
with another aspect of the present invention, a method 
of controlling disk access in a computer system execut- 
ing a checkpoint operation periodically, the system re- 
starting from the last checkpoint prior to a fault occuring 
therein, the system comprising a disk device for storing 
data to be processed in the system and an operating 
system for issuing a write request to the disk device, 
characterized in comprising the steps of first storing 
write data and an associated write request from said op- 
erating system to said disk device into a nonvolatile 
memory, second storing the write data stored in the non- 
volatile memory into said disk device, the second storing 
step including the step of storing write data generated 
before the last checkpoint from the nonvolatile memory 
to the disk device. 



[0007] This invention stores write data requested by 
an operating system into the nonvolatile memory. Also 
this invention stores write data corresponding to a write 
request generated before an execution of the last check- 

5 point from the nonvolatile memory to the disk device. 
[0008] This invention can secure fault resistance. The 
disk control system of this invention can improve the la- 
tency of the disk access by avoiding the delay of the 
processing resulting from view of checkpoint execution. 

10 [0009] Other objects, features, and advantages of the 
present invention will become apparent from the follow- 
ing detailed description. It should be understood, how- 
ever, that the detailed description and specific exam- 
ples, while indicating preferred embodiments of the in- 

'5 vention, are given by way of illustration only, since var- 
ious changes and modifications within the scope of the 
invention will become apparent to those skilled in the art 
from this detailed description. 

20 BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] Figure 1 is a schematic block diagram of a 
computer system using a checkpoint and in which the 
disk control system of this invention is applied. 
25 [001 1] Figure 2 is a schematic block diagram illustrat- 
ing the elements of one embodiment of a computer sys- 
tem where a write request sends data to a nonvolatile 
memory. 

[001 2] Figure 3 is a schematic block diagram illustrat- 
30 ing the movement of data from the indefinite queue to 
the definite queue. 

[0013] Figure 4(a) is a flow chart illustrating the write 

process of this disk control system. 

[0014] Figure 4(b) is a flow chart illustrating the check- 

35 point operation of this disk control system. 

[001 5] Figure 4(c) is a flow chart illustrating the back- 
ground processing of this disk control system. 
[0016] Figure 5(a) is a block diagram illustrating the 
link control structure of a nonvolatile memory. 

40 [0017] Figure 5(b) is a flow chart illustrating the 
processing of a disk write. 

[0018] Figure 5(c) illustrates write data and write re- 
quest structures in the nonvolatile memory. 
[001 9] Figures 6 and 7 are block diagrams illustrating 
45 the operation of a disk control system, when a fault oc- 
curs in the computer system. 

[0020] Figure 8 is a time chart illustrating the opera- 
tion of a disk control system, when a fault occurs in the 
computer system. 

50 [0021] Figure 9(a) is a flow chart illustrating the recov- 
ery sequence (1 ) of this disk control system. 
[0022] Figure 9(b) is a flow chart illustrating the recov- 
ery sequence (2) of this disk control system. 
[0023] Figure 9(c) is a flow chart illustrating the read 

55 processing of this disk control system. 
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DESCRIPTION OF SPECIAL EMBODIMENT 

[0024] One embodiment of this invention is explained, 
referring to the drawings. 

[0025] Figure 1(a) is a block diagram of a computer 
system using a checkpoint method to which the disk 
control system of this invention is applied. 
[0026] When a processor 1 updates the content of a 
main memory 2, this computer system records the be- 
fore image of the updated portion into a log memory 6. 
The information of context on the processor and the con- 
tent of a cache memory are written in the main memory 
at a checkpoint. The state that is needed to restart data 
processing from the last checkpoint is kept in the main 
memory and the log memory. When a fault occurs, the 
computer system restores the main memory state of the 
last checkpoint by writing back the before image to the 
updated portion of the main memory. At the end of the 
checkpoint operation, the content of the log memory is 
cleared. Moreover, the computer system of this inven- 
tion has a nonvolatile memory 3 as an auxiliary memory 
and a disk device 4. 

[0027] Figure 1 (b) is a block diagram of the disk con- 
trol system of this invention. As shown in Figure 1(b), 
the disk control system has a write request storage 
means 11 , a write request fix means 12, a write request 
discard means 13 and a disk write means 14. 
[0028] When an operating system generates a write 
request to the disk device, the write request storage 
means stores the write request and the associated write 
data into the nonvolatile memory. Although the write re- 
quest is kept in the nonvolatile memory at this point, the 
associated data can not be written to the disk device 
before the next checkpoint. If a fault occurs before the 
end of next checkpoint operation, the write request and 
write data are discarded. Hereafter, we say that such a 
write request and data stored in the nonvolatile memory 
are in an indefinite state. 

[0029] When the operation of the next checkpoint is 
executed without any faults, the write request fix means 
changes the state of the write request in the nonvolatile 
memory from an indefinite state to a definite state. This 
means that even if a fault occurs afterward such a 
change in state, the write request is definitely to be ex- 
ecuted. 

[0030] If a fault occurs before the next checkpoint ex- 
ecution, the write request discard means discards disk 
write requests and the associated data in the indefinite 
state. 

[0031] The disk write means executes a disk write op- 
eration according to disk write requests in the definite 
state kept in the nonvolatile memory. 
[0032] Next, the operation of this invention is ex- 
plained, referring to Figures 2 - 9, which are block dia- 
grams and flow charts illustrating the operation of one 
embodiment of this invention. 

[0033] First, as shown in Figure 1 (a), when a write re- 
quest to the disk device is received from the operating 



system, the write request storage means puts the write 
request and the associated write data in the nonvolatile 
memory. 

[0034] As depicted in Figure 2, the nonvolatile mem- 

5 ory has an indefinite queue 31 and a definite queue 32. 
A write request and the associated write data received 
after the last checkpoint are stored in the indefinite 
queue of the nonvolatile memory. Upon execution of the 
checkpoint without a fault, the write requests and the 

10 associated write data in the indefinite queue are moved 
to the definite queue of the nonvolatile memory. 
[0035] When a write request is stored in the indefinite 
queue of the nonvolatile memory by the write request 
storage means, the disk control system informs "write 

*5 completion" to the operating system (S13 in Figure 4 
(a)). Thereby, the operating system does not have to 
wait for the actual completion of the write request, which 
improves performance considerably. 
[0036] Next, the operation of the disk control system 

20 during a checkpoint execution is explained, referring to 
Figure 3. 

[0037] It is assumed that the checkpoint of this com- 
puter system is executed at a state shown in Figure 2. 
When the nonvolatile memory is filled with write data, a 

25 checkpoint is compulsorily executed. The disk control 
system checks the size of the free area of the nonvolatile 
memory. If the capacity of the nonvolatile memory is be- 
low a predetermined value, or after a fixed time to exe- 
cute the checkpoint of the computer system has 

30 elapsed, I/O processing from the operating system is re- 
started. The I/O processing from the operating system 
is delayed, while the checkpoint is being executed. 
[0038] During checkpoint operation, first, write re- 
quests and their write data stored in the indefinite queue 

35 are moved to the definite queue by the write request fix 
means (Figure 3 and S15 in Figure 4(b)). This move- 
ment does not necessarily need physical movement of 
the whole data but changing pointers. The method of 
controlling a write request and write data stored in the 

40 nonvolatile memory is explained later, referring to Figure 
5. 

[0039] After the checkpoint, the disk write means ex- 
ecutes the disk write operation according to the write 
request stored in the definite queue (Figure 3 and S17 

45 in Figure 4(c)), It is recommended that the write opera- 
tion to the disk device by the disk write means is properly 
executed according to the priority of the write request 
and the load of the computer system. 
[0040] The nonvolatile memory contains an indefinite 

50 queue, a definite queue, request structures, and write 
data, referring to Figure 5(a). The indefinite queue and 
the definite queue have a control block (not shown) for 
managing the request structures. The indefinite queue 
has two request structures 4 and 5 as shown in Figure 

55 5(a). The definite queue has .three request structures 
1, 2 and 3 as shown in Figure 5(a). Control information 
on a request structure has a write flag which shows that 
the data is now writing to the disk device, pointer infor- 
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mation to the write data and next request structure, a 
disk number N, a sector number M, and the size of write 
data L, to store the write data kept in the definite queue 
into the disk device as shown in Figure 5(c). The size of 
the write data is a multiple of 51 2 bytes. For instance, 
the request structure 3 has the write data of 2*512 bytes. 
[0041] When a next checkpoint operation is executed, 
the next request pointer information of the request struc- 
ture 3 is changed to point a request structure 4. The next 
request pointer information of a request structure 5 re- 
mains unchanged. The control block of the indefinite 
queue also has means for managing the request struc- 
ture 4 until a next checkpoint operation is executed. The 
control block of the indefinite queue does not manage 
the request structure 4 after the next checkpoint opera- 
tion is executed. 

[0042] Next, a write operation to the disk is explained 
referring to Figure 3. The disk write means searches the 
define queue for the request structure where a write flag 
is not set yet (S 1 00 in Figure 5(b)). The disk write means 
gets the number of the request structures, the size of 
the write data, and the control information on the request 
structure from the control block one by one. Next, the 
disk write means sets the write flag of the request struc- 
ture 1 , of which the flag has not been set yet, through 
the control block of the definite queue (S110 in Figure 5 
(b)). The disk write means stores the write "data in the 
disk according to the request structure 1 (S1 30 in Figure 
5(b)). When the writing process of the disk ends, the disk 
write means removes the request structure 1 and the 
associated data from the link through the control block 
(S150 in Figure 5(b)). The write flags of the request 
structures 2, 3, 4 and 5 are set one by one by the similar 
way. The write data of the request structures 2, 3, 4 and 
5 are written in the disk device. 
[0043] Here, the operation of this invention is ex- 
plained, when a fault occurs in the computer system, 
referring to Figures 6-8. 

[0044] As shown in Figure 8, a disk write request from 
the operating system stores write requests and write da- 
ta A, B and C in the indefinite queue in the nonvolatile 
memory one by one (point© in Figure 8). The operating 
system reads the data C from the indefinite queue in the 
nonvolatile memory (point® in Figure 8). During the 
next checkpoint operation as shown in Figure 8, under 
such a condition, A, B, and C that are stored in an in- 
definite queue of the nonvolatile memory, link to a defi- 
nite queue (CKP point in Figure 8). Also, a disk write 
request and write data from the operating system gen- 
erated after the last checkpoint are linked to the indefi- 
nite queue. 

[0045] After that, the write request and the write data 
O, E and F are linked in the indefinite queue of the non- 
volatile memory one by one (point ® in Figure 8). A 
disk read request from the operating system reads the 
data F from the indefinite queue and the data C from the 
definite queue in the nonvolatile memory (point @ in 
Figure 8) 



[0046] It is assumed that a fault occurred in the com- 
puter system after the checkpoint (breakdown point in 
Figure 8). The three write requests of 6d-6f (D, E and F) 
were stored in the indefinite queue as shown in Figures 
5 6 and 8. The three write requests of 6a-6c (A, B and C) 
were stored in definite queue as shown in Figures 6 and 
8. 

[0047] In this case, the computer system of this inven- 
tion first restores the computer system to the state of the 
1( > last checkpoint (CKP point in Figure 8). The computer 
system begins restarting from the checkpoint state after 
the restoring process. 

[0048] When the computer system is restarted, the 
disk control system discards all the write requests 6d-6f 
*s stored in the indefinite queue in the nonvolatile memory 
by the write request discard means (S17 in Figure 9(a)). 
The write requests 6d-6f and the associated data are 
issued again because the system restarts from the last 
checkpoint state as mentioned above. 
20 [0049] Figure 7 illustrates the state of the nonvolatile 
memory after this recovery processing. 
[0050] On the other hand, even if the state of the com- 
puter system rolls back to the last checkpoint, the write 
requests 6a-6c stored in the definite queue in the non- 
25 volatile memory are effective. Therefore the disk write 
requests 6a-6c are properly stored in the disk device by 
the disk write means (S19 in Figure 9(b)). 
[0051] As a result consistency of disk operations is 
maintained under control of the checkpoint method with 
30 this recoverable disk control system. In addition , the de- 
lay of the disk write according to the checkpoint method 
can be excluded. Thus, the latency of the disk access 
can be improved. 

[0052] Next, a read request from the operating system 
35 is explained, referring to Figures 8 and 9. 

[0053] At this time, the disk control system decides 
whether there are data to be read from the nonvolatile 
memory (S21 in Figure 9(c)). If there are data to be read 
out (Yes of S21 in Figure 9(c)), the data is read from the 
to nonvolatile memory (@ and® points in Figures 8 and 
S25 in Figure 9(c)). After that, this read processing ends. 
[0054] On the other hand, if there are not data to be 
read from the nonvolatile memory (No of S21 in Figure 
9(c)), the disk control system accesses the disk device 
45 (S23 in Figure 9(c)). At this point, it is recommended that 
the data read from the disk device is able to be stored 
in the nonvolatile memory. 

[0055] As explained in detail above, when a fault in 
the computer system occurs, this invention may have 

so stored a write request into the definite queue of the non- 
volatile memory. The write request which is generated 
before the last checkpoint operation is executed. Also 
this invention stores a write request in the indefinite 
queue of the nonvolatile memory, the write request 

55 which is generated after the last checkpoint is executed 
after the next checkpoint For instance, even if a power 
supply failure occurs in the computer system, the infor- 
mation of the write request is maintained because the 
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information on the write request is stored in the nonvol- 
atile memory. 

[0056] The disk control system of this invention aban- 
dons all the write requests and the write data generated 
after the last checkpoint which are stored in the indefi- 
nite queue in the nonvolatile memory. However, the data 
in the definite queue is written into the disk device. Thus, 
even if the computer system is broken down by the pow- 
er supply failure, the write data in the definite queue is 
written into the disk device at the reboot of the computer 
system. 

[0057] Concurrently with the processing of write re- 
quests from the operating system, write data which are 
generated before the last checkpoint is stored in the disk 
device. 

[0058] Moreover, as for a read request to the disk de- 
vice, the disk control system of this invention first exam- 
ines whether the requested data is on the nonvolatile 
memory so that the read request keeps coherency just 
like normal access to the disk device. 
[0059] As a result, the disk control system of this in- 
vention can secure fault tolerance of the computer sys- 
tem. The disk control system of this invention can im- 
prove the latency of the disk access by avoiding the de- 
lay resulting from a checkpoint execution. 
[0060] Numerous modifications and variations of the 
present invention are~possible in light of the above 
teachings. It is therefore to be understood that, within 
the scope of the appended claims, the present invention 
can be practiced in a manner other than as specifically 
described herein. 



Claims 

1. A computer system executing a checkpoint opera- 
tion periodically, the system restarting from the last 
checkpoint prior to a fault occurring therein, the sys- 
tem comprising a disk device (4) for storing data to 
be processed in the system, and an operating sys- 
tem (15) for issuing a write request to the disk de- 
vice, characterized in that 

said disk device is for reading and storing data; 
said operating system is for issuing a write or a 
read request to the disk device; and in that the 
system further includes 

a nonvolatile memory (3); 
write request storage means (11) for stor- 
ing write data and an associated the write 
request in the nonvolatile memory; and 
disk write means (14) for storing the write 
data stored in the nonvolatile memory by 
the write request storage means into the 
disk device, the disk write means further in- 
cluding means for storing write data ac- 
cording to the write request generated be- 



fore the last checkpoint from the nonvola- 
tile memory to the disk device. 

2. The computer system of claim 1 , characterized in 
5 that further the system includes means for notifying 

a write completion to the operating system, after 
storing the write request and the associated write 
data in the nonvolatile memory, when a write re- 
quest from the operating system to the disk device 
10 is issued. 

3. A computer system of claim 1, characterized in 
that further the system includes: 

'5 means for reading the write data from the non- 

volatile memory if there is the corresponding 
data on the nonvolatile memory, when the op- 
erating system issues a read request to the disk 
device; and 

20 means for reading the write data from the disk 

device, if there is not the corresponding data on 
the nonvolatile memory. 

4. The computer system of claim 1 , characterized in 
25 that further the system includes write request dis- 
card means (13) for invalidating write data and cor- 
responding write requests generated after the last 
checkpoint, when a fault occurred in the system. 

30 5. The computer system of daim 1 , characterized in 
that the write request storage means includes an 
indefinite queue (31) for storing a write request 
which is generated after the last checkpoint, and a 
definite queue (32) for storing a write request which 

35 is generated before the last checkpoint. 

6. The computer system of claim 5, characterized in 
that further the system includes write request fix 
means (12) for moving the write data stored in the 

40 indefinite queue to the definite queue, while a 
checkpoint operation is executed. 

7. The computer system of claim 5, characterized in 
that the write request storage means includes 

45 means for storing the write request and the associ- 
ated write data in the indefinite queue. 

8. The computer system of claim 5, characterized in 
that the disk write means includes means for stor- 

50 ing the write data stored in the definite queue into 
the disk device. 

9. The computer system of claim 5, characterized in 
that the system includes means for storing ail write 

55 data stored in the definite queue into the disk de- 
vice, while rebooting the computer system. 

10. The computer system of claim 5, characterized in 
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that the indefinite and definite queues includes con- 
trol block means for controlling each of write data 
and the associated write request, each of the write 
data having a request structure for linking write data 
and next request structure. 

11. The computer system of claim 10, characterized 
in that the request structure includes a writing flag 
for indicating that the write processing to the disk 
device is executed. 

12. The computer system of claim 11 , characterized in 
that the disk write means comprises: 

means for detecting whether a write flag of the 
request structure is set or not; 
means for setting the writing flag, if the write 
flag is not set; 

means for storing write data of the definite 
queue to the disk device, based on information 
of the request structure; and 
means for removing the request structure and 
the associated write data when writing the data 
to the disk device is completed. 

13. A method of controlling disk access in a computer 
~" system executing a checkpoint operation periodi- 
cally, the system restarting from the last checkpoint 
prior to a fault occuring therein, the system compris- 
ing a disk device for storing data to be processed in 
the system and an operating system for issuing a 
write request to the disk device, characterized in 
comprising the steps of: 

first storing (S10) write data and an associated 
write request from said operating system to 
said disk device into a nonvolatile memory (3); 
second storing (S17, S130) the write data 
stored in the nonvolatile memory (3) into said 
disk device (4), the second storing step includ- 
ing the step of storing write data generated be- 
fore the last checkpoint from the nonvolatile 
memory (3) to the disk device (4). 

14. The method of claim 1 3, further comprising the step 
of notifying (S 1 3) a write completion to the operating 
system, after storing the write data and the associ- 
ated write request to the nonvolatile memory, when 
a write request from the operating system to the disk 
device is issued. 

15. The method of claim 13. further comprising the 
steps of: 

first reading (S21 , S25) the write data from the 
nonvolatile memory if there is acquired write 
data among write data stored in the nonvolatile 
memory, when the operating system issues a 



read request to the disk device ; and 
second reading (S21 , S23) write data from the 
disk device, if there is not acquired write data 
among write data stored in the nonvolatile 
5 memory (3). 

1 6. The method of claim 1 3, further comprising the step 
of invalidating (S17) all write data and the corre- 
sponding write request generated after the last 

10 checkpoint, if a fault has occurred. 

17. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 

15 which generated after the last checkpoint, and a 
definite queue (32) for storing write data to the disk 
device generated before a last checkpoint, further 
comprising the step of moving (S1 5) the write re- 
quest and write data stored in an indefinite queue 

20 to a definite queue, while a checkpoint operation is 
executing. 

18. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 

25 ing write data and the associated write request 
which generated after the last checkpoint, and a 
definite queue (32) for storing write data into the 
disk device generated before the last checkpoint, 
wherein the second storing step includes the step 

30 of storing (S1 7) the write data stored in the definite 
queue into the disk device. 

19. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 

35 jng write data and the associated write request 
which generated after the last checkpoint, and a 
definite (32) queue for storing write data and the as- 
sociated write request to the disk device generated 
before the last checkpoint, further comprising the 

40 step of storing (S1 9) all write data stored in the def- 
inite queue into the disk device, while recovering the 
computer system. 



45 



20. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 
which generated after the last checkpoint, wherein 
the first storing step includes the step of discarding 
(S1 7) the write data and write requests in the indef- 
50 inite queue after a fault occurred. 



Patentanspruche 

55 1. Ein Computersystem, das periodisch eine Pruf- 
punktoperation ausftihrt, wobei das System von 
dem letzten Prufpunkt, der vor einem Fehler darin 
auftritt, neu startet, wobei das System eine Platten- 
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einrichtung (4) zum Speichem von in dem System 
zu verarbeitenden Daten und ein Betriebssystem 
(15) zum Ausgeben einer Schreibanfrage an die 
Platteneinrichtung aufweist, dadurch gekenn- 
zeichnet, daB 5 

die genannte Platteneinrichtung zum Lesen 
und Speichem von Oaten vorgesehen ist; 
das genannte Betriebssystem zum Ausgeben 
einer Schreib- Oder einer Leseanfrage an die *o 
Platteneinrichtung vorgesehen ist und das Sy- 
stem femer aufweist 

einen nichtfluchtigen Speicher (3); 
Schreibanfragenspeichermittel (11) zum *5 
Speichem von Schreibdaten und einer zu- 
gehorigen Schreibanfrage in den nicht- 
fluchtigen Speicher; und 
Plattenschreibmittel (14) zum Speichem 
der in dem nichtfluchtigen Speicher ge- 20 
speicherten Daten durch die Schreibanfra- 
genspeichermittel in die Platteneinrich- 
tung, wobei die Plattenschreibmittel ferner 
Mittel zum Speichem von Schreibdaten 
entsprechend der Schreibanfrage aufwei- 25 
sen, die vordem letzten Prtifpunkt von dem 
nichtfluchtigen Speicher zu der Plattenein- 
richtung erzeugt worden isL 

2. Das Computersystem nach Anspruch 1, dadurch 30 
gekennzeichnet, daft das System ferner Mittel auf- 
weist zum Melden einer Beendigung des Schrei- 
bens an das Betriebssystem nach dem Speichem 
der Schreibanfrage und der zugehorigen Schreib- 
daten in den nichtfluchtigen Speicher, wenn eine 35 
Schreibanfrage von dem Betriebssystem an die 
Platteneinrichtung ausgegeben wird. 

3. Ein Computersystem nach Anspruch 1, dadurch 
gekennzeichnet, daft das System ferner aufweist: <o 

Mittel zum Lesen der Schreibdaten aus dem 
nichtfluchtigen Speicher, falls sich die entspre- 
chenden Daten in dem nichtfluchtigen Speicher 
befinden, wenn das Betriebssystem eine Lese- 45 
anfrage an die Platteneinrichtung ausgibt; und 
Mittel zum Lesen der Schreibdaten aus der 
Platteneinrichtung, falls sich die entsprechen- 
den Daten nicht in dem nichtfluchtigen Spei- 
cher befinden. so 

4. Das Computersystem nach Anspruch 1, dadurch 
gekennzeichnet daS das System ferner Schreib- 
anfragenverwerfmittel (13) aufweist zum Ungultig- 
machen der Schreibdaten und zugehfiriger Schrei- 55 
banfragen, die nach dem letzten PrQfpunkt erzeugt 
wurden, wenn ein Fehler in dem System aufgetre- 
ten ist. 



5. Das Computersystem nach Anspruch 1, dadurch 
gekennzeichnet, daB das Schreibanfragenspei- 
chermittel eine unbestimmte Warteschlange (31) 
zum Speichem einer Schreibanfrage, die nach dem 
letzten Prtifpunkt erzeugt wurde, und eine bestimm- 
te Warteschlange (32) zum Speichem einer Schrei- 
banfrage, die vor dem letzten PrQfpunkt erzeugt 
wurde, aufweist. 

6. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daft das System femer Schreib- 
anfragenfixiermitte! (12) aufweist zum Verschieben 
der in der unbestimmten Warteschlange gespei- 
cherten Schreibdaten in die bestimmte Warte- 
schlange, wahrend eine Prufpunktoperation ausge- 
fuhrt wird. 

7. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daB das Schreibanfragenspei- 
chermittel Mittel zum Speichem der Schreibanfrage 
und der zugehorigen Schreibdaten in der unbe- 
stimmten Warteschlange aufweist. 

8. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daB das Plattenschreibmittel Mit- 
tel zum Speichem der in der bestimmten Warte- 
schlange gespeicherten Schreibdaten in der Plat- 
teneinrichtung aufweist. 

9. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daB das System Mittel aufweist, 
die alle in der bestimmten Warteschlange gespei- 
cherten Schreibdaten in die Platteneinrichtung 
schreibt en, wahrend das Computersystem neu 
bootet. 

10. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daB die unbestimmte und die be- 
stimmte Warteschlange Steuerblockmittel aufwei- 
sen zum Steuern jeweils der Schreibdaten und der 
zugeherigen Schreibanfrage, wobei die Schreibda- 
ten jeweils eine Anfragestrukturzum Verbinden der 
Schreibdaten und der nachsten Anfragestruktur 
aufwei sen. 

11. Das Computersystem nach Anspruch 10, dadurch 
gekennzeichnet daB die Anfragestruktur ein 
Schreibflag aufweist zum Anzeigen, daB der 
Schreibvorgang auf die Platteneinrichtung ausge- 
fuhrt wird. 

12. Das Computersystem nach Anspruch 11 , dadurch 
gekennzeichnet, daB das Plattenschreibmittel 
aufweist: 

Mittel zum Detektieren, ob ein Schreibflag der 

Anfragestruktur gesetzt ist Oder nicht; 

Mittel zum Setzen des Schreibflags. falls das 
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Schreibflag nicht gesetzt ist; 
Mittet zum Speichern von Schreibdaten der be- 
stimmten Warteschlange auf der Plattenein- 
richtung, basierend auf einer Information der 
Anfragestruktur; und 

Mittel zum Entfemen der Anfragestruktur und 
der zugehorigen Schreibdaten, wenn das 
Schreiben der Daten auf die Platteneinrichtung 
beendet ist 

13. Ein Verfahren zum Steuem eines Plattenzugriffs in 
einem Computersystem, das periodisch eine Prtif- 
punktoperatton ausfuhrt, wobei das System von 
dem letzten Prufpunkt vor einem Fehler, der darin 
aufgetreten ist, neu startet, wobei das System eine 
Platteneinrichtung zum Speichern von in dem Sy- 
stem zu verarbeitenden Daten und ein Betriebssy- 
stem zum Ausgeben einer Schreibanfrage an die 
Platteneinrichtung aufweist, dadurch gekenn- 
zeichnet, daft das Verfahren folgende Schritte auf- 
weist: 

Erstes Speichern (S10) von Schreibdaten und 
einer zugehorigen Schreibanfrage von dem ge- 
nannten Betriebssystem an die genannte Plat- 
teneinrichtung in einem nichtfluchtigen Spei- 
cher (3); 

zweites Speichern (S17, S130) der in dem 
nichtfliichtigen Speicher (3) gespeicherten 
Schreibdaten in die genannte Platteneinrich- 
tung (4), wobei der zweite Speicherschritt den 
Schritt des Speichems der vor dem letzten 
Prufpunkt erzeugten Schreibdaten aus dem 
nichtfluchtigen Speicher (3) in die Plattenein- 
richtung (4) umfaftt 

14. Das Verfahren nach Anspruch 13, das femer den 
Schritt des Meldens (S13) einer Beendigung des 
Schreibens an das Betriebssystem aufweist, nach- 
dem die Schreibdaten und die zugehdrige Schreib- 
anfrage in den nichtfliichtigen Speicher geschrie- 
ben sind, wenn eine Schreibanfrage von dem Be- 
triebssystem an die Platteneinrichtung ausgegeben 
wird. 

15. Das Verfahren nach Anspruch 13, das femer fol- 
gende Schritte aufweist: 

Erstes Lesen (S21 , S25) der Schreibdaten aus 
dem nichtfliichtigen Speicher, wenn erfa&te 
Schreibdaten unter den in dem nichtfluchtigen 
Speicher gespeicherten Schreibdaten sind, 
wenn das Betriebssystem eine Leseanfrage an 
die Platteneinrichtung ausgibt und 
zweites Lesen (S21, S23) der Schreibdaten 
von der Platteneinrichtung, wenn unter den in 
dem nichtfluchtigen Speicher (3) gespeicher- 
ten Schreibdaten nicht erfafite Schreibdaten 



sind. 

16. Das Verfahren nach Anspruch 13, das femer den 
Schritt des Ungultigmachens (S1 7) aller Schreibda- 

5 ten und der korrespondierenden Schreibanfragen 
umfafit, die nach dem letzten Prufpunkt erzeugt 
word en sind, wenn ein Fehler aufgetreten ist. 

17. Das Verfahren nach Anspruch 1 3, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31 ) zum Speichern von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, und eine bestimmte 
Warteschlange (32) zum Speichern von Schreibda- 
ten, die vordem.letzten Prufpunkt erzeugt wurden, 
auf der Platteneinrichtung umfaflt, wobei das Ver- 
fahren femer den Schritt des Verschiebens (S1 5) 
der Schreibanfrage und Schreibdaten, die in der un- 
bestimmten Warteschlange gespeichert sind, in ei- 
ne bestimmte Warteschlange aufweist, wahrend ei- 
ne. Prufpunktoperation ausgefuhrt wird. 

18. Das Verfahren nach Anspruch 13, wobei der nicht- 
fliichtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichern von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurde r und eine bestimmte War- 
teschlange (32) zum Speichern von Schreibdaten, 
die vor dem letzten Prufpunkt erzeugt wurden, in 
der Platteneinrichtung aufweist, wobei der zweite 
Speicherschritt den Schritt des Speichems (S17) 
der in der bestimmten Warteschlange gespeicher- 
ten Schreibdaten in der Platteneinrichtung umfaftt 

19. Das Verfahren nach Anspruch 13, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichern von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, und eine bestimmte 
Warteschlange (32) zum Speichern von Schreibda- 
ten und der zugehorigen Schreibanfrage, die vor 
dem letzten Prufpunkt erzeugt wurden, in der Plat- 
teneinrichtung aufweist, wobei das Verfahren femer 
den Schritt des Speichems (S19) aller Schreibda- 
ten, die in der bestimmten Warteschlange gespei- 
chert sind, in die Platteneinrichtung aufweist, wSh- 
rend sich das Computersystem wiederherstellt. 

20. Das Verfahren nach Anspruch 13, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31 ) zum Speichern aller Schreibdaten und der 
zugehdrigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, aufweist, wobei der er- 
ste Speicherschritt den Schritt des Verwerfens 
(S1 7) der Schreibdaten und der Schreibanfragen in 
der unbesdtimmten Warteschlange nach dem Auf- 
treten eines Fehlers aufweist 
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Revendications 

1. Systeme informatique executant periodiquement 
une operation de point de control e, le systeme re- 
demarrant a partir du dernier point de contrdle avant 
une erreur survenant a I'interieur, le systeme com- 
prenant une unite de disque (4) pour stocker des 
donnees a traiter dans le systeme, et un systeme 
d'exploitation (15) pour delivrer une demande 
d'ecriture a I'unit6 de disque, caracterise en ce que 
ladite unite de disque sert a !a lecture et le stockage 
de donnees ; ledit systeme d'exploitation sert a de- 
livrer une demande d'ecriture ou de lecture a I'unite 
de disque ; et en ce que le systeme comprend en 
outre : 

une memoire non volatile (3) ; 
des moyens de stockage de demandes d'ecri- 
ture (11) pour stocker des donnees d'ecriture 
et une demande d'ecriture associee dans la 
memoire non volatile ; et 
des moyens d'ecriture sur disque (14) pour 
stocker les donnees d'ecriture stockees dans 
la memoire non volatile par les moyens de stoc- 
kage de demandes d'ecriture dans I'unite de 
disque, les moyens d'ecriture sur disque com- 
prenant en outre des moyens pour stocker des 
donnees d'ecriture selon ta demande d'ecriture 
generee avec te dernier point de controle de la 
memoire non volatile a I'unite de disque. 

2. Systeme informatique selon la revendication 1 , ca- 
racterise en ce que le systeme comprend des 
moyens pour notifier une fin d'ecriture au systeme 
d'exploitation, apres avoir stocke la demande 
d'ecriture et les donnees d'ecriture associees dans 
la memoire non volatile, lorsqu'une demande d'ecri- 
ture du systeme d'exploitation a I'unite de disque 
est delivree. 

3. Systeme informatique selon la revendication 1 , ca- 
racterise en ce que le systeme comprend en 
outre : 

des moyens pour lire les donnees d'ecriture de 
la memoire non volatile sll y a les donnees cor- 
respondantes sur la memoire non volatile, lors- 
que le systeme d'exploitation delivre une de- 
mande de lecture a I'unite de disque ; et 
des moyens pour lire les donnees d'ecriture de 
I'unite de disque, s'il n'y a pas les donnees cor- 
respondantes dans la memoire non volatile. 

4. Systeme informatique selon la revendication 1 , ca- 
racterise en ce que le systeme comprend en outre 
des moyens de suppression de demandes d'ecritu- 
re (13) pour invaiider des donnees d'ecriture et les 
demandes d'ecriture correspondantes generees 



apres le dernier point de controle, lorsqu'une erreur 
survient dans le systeme. 

5. Systeme informatique selon la revendication 1 , ca- 
5 rac tense en ce que les moyens de stockage de 

demandes d'ecriture comprennent une file d'attente 
indefinie (31) pour stocker une demande d'ecriture 
qui est generee apres le dernier point de controle, 
et une file d'attente definie (32) pour stocker une 
to demande d'ecriture qui est generee avant le dernier 
point de controle. 

6. Systeme informatique selon la revendication 5, ca- 
racterise en ce que le systeme comprend en outre 

15 des moyens de determination de demandes d'ecri- 
ture (12) pour transferer les donnees d'ecriture 
stockees de la file d'attente indefinie a la file d'at- 
tente definie, alors qu'une operation de point de 
controle est executee. 

20 

7. Systeme informatique selon la revendication 5, ca- 
racterise en ce que les moyens de stockage de 
demandes d'ecriture comprennent des moyens 
pour stocker la demande d'ecriture et les donnees 

25 d'ecriture associees dans la file d'attente indefinie. 

8. Systeme informatique selon la revendication 5, ca- 
racterise en ce que les moyens d'ecriture sur dis- 
que comprennent des moyens pour stocker les don- 

30 nees d'ecriture stockees dans la file d'attente defi- 
nie dans I'unite de disque. 

9. Systeme informatique selon la revendication 5, ca- 
racterise en ce que le systeme comprend des 

35 moyens pour stocker toutes les donnees d'ecriture 
stockees dans la file d'attente definie dans I'unite 
de disque, tout en redemarrant le systeme informa- 
tique. 

40 10. Systeme informatique selon la revendication 5, ca- 
racterise en ce que les files d'attente indefinies et 
definies comprennent des moyens de blocs de con- 
trole pour controler chacune des donnees d'ecriture 
et la demande d'ecriture associee, chacune des 

45 donnees d'ecriture ayant une structure de demande 
pour lier des donnees d'ecriture et la structure de 
demande suivante. 

11. Systeme informatique selon la revendication 10, 
50 caracterise en ce que la structure de demande 
comprend un indicate ur d'ecriture pour indiquer que 
le traitement d'ecriture sur Funite de disque est exe- 
cute. 

55 12. Systeme informatique selon la revendication 1 1 , ca- 
racterise en ce que les moyens d'ecriture sur dis- 
que comprennent : 
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des moyens pour detecter si un indicateur 
d'ecriture de la structure de demande est initia- 
lise ou non ; 

des moyens pour initialiser Pindicateur d'ecritu- 
re, si I'indicateur d'ecriture n'est pas initialise ; 
des moyens pour stocker des donnees d'ecri- 
ture de fa file d'attente definie sur I'unite de dis- 
que, sur la base d'informations de la structure 
de demande ; et 

des moyens pour supprimer ta structure de de- 
mande et les donnees d'ecriture associees 
lorsque Pecriture des donnees sur Punite de dis- 
que est achevee. 

1 3. Procede de controle d'acces au disque dans un sys- 
teme informatique executant periodiquement une 
operation de point de controle, le systeme redemar- 
rant a partir du dernier point de controle avant une 
erreur survenant a Pinterieur, le systeme compre- 
nant une unite de disque pour stocker des donnees 
a traiter dans le systeme et un systeme Sexploita- 
tion pour delivrer une demande d'ecriture sur I'unite 
de disque, caracterise par les etapes de : 

premier stockage (S10) des donnees d'ecriture 
et une demande d'ecriture associee dudit sys- 
teme d'exploitation a ladite unite de disque 
dans une memoire non volatile (3) ; 
deuxieme stockage (S17, S130) des donnees 
d'ecriture stockees dans la memoire non vola- 
tile (3) dans ladite unite de disque (4), I'etape 
de deuxieme stockage comprenant I'etape de 
stocker des donnees d'ecriture generees avant 
le dernier point de controle de la memoire non 
volatile (3) a I'unite de disque (4). 

14. Procede selon la revendication 13, comprenant en 
outre I'etape de notification (S1 3) d'une fin d'ecriture 
au systeme d'exploitation, apres avoir stocke les 
donnees d'ecriture et la demande d'ecriture asso- 
ciee dans la memoire non volatile, lorsqu'une de- 
mande d'ecriture du systeme d'exploitation a Punite 
de disque est deiivree. 

15. Proced6 selon la revendication 13. comprenant en 
outre les etapes de : 

premiere lecture (S21, S25) des donnees 
d'ecriture de la memoire non volatile, si des 
donnees d'ecriture sont acquises parmi les 
donnees d'ecriture stockees dans la memoire 
non volatile, lorsque le systeme d'exploitation 
delivre une demande de lecture a Punite de 
disque ; et 

deuxieme lecture (S21, S23) des donnees 
d'ecriture de Punite de disque, si des donnees 
d'ecriture ne sont pas acquises parmi les don- 
nees d'ecriture stockees dans la memoire non 



volatile (3). 

16. Procede selon la revendication 13, comprenant en 
outre I'etape d'invalidation (S17) de toutes les don- 

5 nees d'ecriture et de la demande d'ecriture corres- 
pondante generees apres le dernier point de con- 
trole, si une erreur est apparue 

17. Procede selon la revendication 13, dans lequel la 
*o memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 
la demande d'ecriture associee generees apres le 
demier point de controle, et une file d'attente definie 
(32) pour stocker des donnees d'ecriture dans Puni- 

*5 te de disque generees avant un dernier point de 
controle, comprenant en outre I'etape de transfer! 
(S15) de la demande d'ecriture et des donnees 
d'ecriture stockees d'une file d'attente indefinie a 
une file d'attente definie, pendant Pexecution de 

20 Poperation du point de controle. 

18. Procede selon la revendication 13, dans lequel la 
memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 

25 la demande d'ecriture associee generees apres le 
demier point de controle, et une file d'attente definie 
(32) pour stocker deadonnees d'ecriture dans I'uni- 
te de disque generees avant le demier point de con- 
trole, dans lequel I'etape de deuxieme stockage 

30 comprend I'etape de stockage (S17) des donnees 
d'ecriture stockees dans la file d'attente definie 
dans I'unite de disque. 

19. Procede selon la revendication 13, dans lequel la 
35 memoire non volatile comprend une file d'attente in- 
definie (31) pour stocker des donnees d'ecriture et 
la demande d'ecriture associee generees apres te 
demier point de contrdle, et une file d'attente definie 
(32) pour stocker des donnees d'ecriture et la de- 

<o mande d'ecriture associee dans I'unite de disque 
generees avant le demier point de controle, com- 
prenant en outre I'etape de stockage (S19) de tou- 
tes les donnees d'ecriture stockees dans la file d'at- 
tente definie dans I'unite de disque, pendant la res- 

45 tauration du systeme informatique. 

20. Procede selon la revendication 13, dans lequel la 
memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 

so la demande d'ecriture associee generees apres le 
demier point de controle, dans lequel la premiere 
etape de stockage comprend I'etape de suppres- 
sion (S 1 7) des donnees d'ecriture et des demandes 
d'ecriture dans la file d'attente indefinie apres ap- 

55 parition cPune erreur. 
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